Privacy policy

Last updated 14 September 2026

1. Who controls your data

Luxy Africa Mobility Limited (RC 9703335), a company registered in Nigeria, is the data controller for personal data collected through Muje. Reach us at hello@muje.ng, which is also the address for any privacy question or request in this policy.

2. What we collect

If you join the rider list or vote for a city

• your email address, if you give us one;
• the city you chose, and the area of that city if you tell us.

If you apply to drive

• your name, phone number and email address;
• the city you drive in and the plan you are interested in;
• your vehicle’s make, model, year and — if you give it — plate number;
• anything else you choose to write in the notes field.

We do not ask for your driver’s licence number, your NIN or any document upload on the website. A person reviews your application first. Then we verify those documents with you directly, so government identity data never passes through a public web form. We use them only to confirm you are eligible to drive, and we keep them no longer than that takes.

Technical data and analytics

Our hosting provider sees your IP address and basic request information. It needs these to serve the site and to protect it from abuse.

We use Vercel Web Analytics to understand how many people visit, which pages they read, roughly where in the world they are, and which link or search brought them. It records page views, the referring site, country, and device type.

It sets no cookies and stores nothing on your device. It does not follow you to other websites, does not build an advertising profile, and we cannot use it to identify you individually. To count returning visits within a day it derives a temporary value from your IP address and browser, which is discarded and cannot be traced back to you. We do not use Google Analytics or any advertising tracker.

Our lawful basis is legitimate interest — knowing whether the site works and where our drivers and riders come from. You may object at any time at hello@muje.ng, and your browser’s “Do Not Track” or tracking-protection settings are respected where they apply. If we ever add a tool that does set cookies, we will update this policy and ask for your consent first.

3. Why we use it, and our lawful basis

Under the Nigeria Data Protection Act 2023 (NDPA) we must have a lawful basis for processing your data. Ours are:

• Your consent — sending you the one launch email you asked for, and counting your city vote. You may withdraw consent at any time.
• Performance of a contract, or steps toward one — reviewing your driver application, arranging your inspection, and administering your plan.
• Legitimate interest — keeping the platform safe, preventing fraud and abuse, and keeping our own records.
• Legal obligation — where Nigerian law, a regulator or a court requires us to keep or disclose information.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Who we share it with

We share personal data only where it is needed, and only with:

• Service providers who work on our instructions — hosting, email delivery, and identity or document verification partners — under contracts that require them to protect your data;
• Vehicle inspection partners, for the roadworthiness check, limited to what they need to carry it out;
• Riders and drivers, once trips begin — a rider sees their driver’s name, photo, vehicle and plate; a driver sees the rider’s first name and pickup point;
• Authorities, where we are legally required to disclose, or where it is necessary to protect someone’s safety.

5. Where your data is held

Some of our providers store or process data outside Nigeria. Where that happens we take the steps the NDPA requires for cross-border transfers, including contractual safeguards and satisfying ourselves that the destination offers adequate protection.

6. How long we keep it

• Rider list and city votes — until we launch in your city and send the launch email, or until you unsubscribe, whichever comes first.
• Unsuccessful driver applications — up to 12 months, so we can tell you why and so you can reapply without starting over.
• Approved drivers — for as long as you drive with Muje, and then for the period Nigerian tax and company law requires us to keep business records.
• Verification documents — only as long as needed to confirm eligibility and to meet our legal obligations.
• Trip and payment records — kept because Nigerian tax and transport regulations require us to account for them, for six years from the end of the financial year in which the trip took place. They are anonymised when an account is deleted: your name, phone number and email are removed, so the records no longer identify you. Card details are held by Paystack and are never stored by Muje.
• Records relating to a safety incident, dispute or legal claim — kept until the matter is resolved, and for any period required afterwards by law.

7. Keeping it safe

We encrypt data in transit. Only staff who need personal data can reach it. We keep our systems patched.

No system is perfectly secure. If a breach happens that is likely to harm you, we will tell you, and we will tell the Nigeria Data Protection Commission, as the NDPA requires.

8. Your rights

Under the NDPA you have the right to:

• ask what personal data we hold about you, and get a copy;
• have inaccurate data corrected;
• ask us to delete your data, where we have no lawful reason to keep it;
• object to, or ask us to restrict, certain processing;
• withdraw consent you previously gave;
• receive your data in a portable format, and ask us to send it elsewhere where that is technically feasible;
• not be subject to a decision made solely by automated means that significantly affects you — every driver application is read by a person.

You can delete your account from inside the Muje or Muje Driver app, or by email if you no longer have it — the steps are here. Anything not legally required to be kept is deleted within 30 days.

To exercise any of these, email hello@muje.ng. We respond within 30 days. You will not be charged, and you will not be treated differently for asking.

9. Children

Muje is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, tell us and we will delete it.

10. Complaints

If you are unhappy with how we have handled your data, tell us first so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).

11. Changes to this policy

If we make a material change we will update the date at the top and, where the change affects you meaningfully, tell you by email or in the app. Our terms of service explain the rest of our relationship with you.